Privacy Policy

SKYNET AI LTD · skynetai.it.com · England and Wales · effective 1 September 2026

This Privacy Policy explains how SKYNET AI LTD ("we", "us" or "our"), a company established in the United Kingdom with its principal place of business at 119 Windmill Avenue, St. Albans, AL4 9SL, United Kingdom, collects, uses, stores, discloses and otherwise processes personal data when you visit https://skynetai.it.com, communicate with us, or deal with us in connection with our B2B wholesale of professional and commercial equipment, electronics and appliance retail, computer systems design and related services, computers, peripherals and software, computer stores, enterprise hardware wholesale, B2B IT infrastructure procurement, peripherals and office technology retail, custom computer system design and integration, enterprise software licensing and distribution, and commercial electronics supply chain activities.

We are committed to processing personal data lawfully, fairly and transparently in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR") as amended, and other applicable United Kingdom data protection and privacy laws. This Policy is effective from 1 September 2026. If you do not agree with this Policy, you should not use our website or provide personal data to us except where required by law.

For the purposes of UK data protection law, SKYNET AI LTD is the controller of personal data described in this Policy unless we expressly state that we act as a processor for a customer. Our contact details for privacy matters are: postal address 119 Windmill Avenue, St. Albans, AL4 9SL, United Kingdom; email service@skynetai.it.com (plain text only); telephone +44 7520 987654. Please see also our Cookie Policy at cookie-policy.html, Website Terms of Service at terms-of-service.html, commercial Terms and Conditions at terms-and-conditions.html, and contact page at contact.html.

1. Scope and who this Policy covers

This Policy applies to personal data relating to visitors of skynetai.it.com, individuals who contact us by email, telephone or post, representatives of business customers and prospective customers, suppliers and their staff, job applicants where applicable, and other individuals whose data we process in the ordinary course of our commercial operations. It does not create contractual rights beyond those arising under applicable law, and it does not form part of any employment contract.

Our services and website are directed primarily at businesses and professional purchasers. We do not knowingly target children. If you believe we have collected personal data relating to a child under 13 (or under 16 where parental consent would be required for information society services), please contact us at service@skynetai.it.com so that we can delete the data where appropriate.

Where we process personal data on behalf of a customer under a written data processing agreement, the customer's privacy notice and instructions govern that processing, and this Policy describes our role as processor only to the extent relevant. Links from our website to third-party sites are not covered by this Policy; those sites are governed by their own privacy terms.

2. Categories of personal data we process

Depending on your interaction with us, we may process identity and contact data such as name, job title, employer or organisation name, business address, email address, telephone number and correspondence details. We may also process account and transaction data relating to enquiries, quotations, purchase orders, invoices, delivery notes, payment references, credit account information and complaint or support records.

Technical data may include Internet Protocol address, browser type and version, device identifiers, time zone setting, operating system, referral source, pages viewed, dates and times of access, and similar diagnostic information collected through server logs and cookies as described in our Cookie Policy. Usage data may include how you navigate skynetai.it.com, which content you view, and whether communications are opened where lawfully permitted.

We may process marketing and communications preferences, records of consent or objections, and notes of meetings or calls with business representatives. Special category data is not sought in the ordinary course of our website or B2B trading. If special category data is incidentally provided, we will process it only where a UK GDPR Article 9 condition applies or we will delete it where it is not required.

Financial data processed in a B2B context may include bank account details for supplier payments, credit references, and records necessary for anti-fraud and accounting. We do not request consumer payment card data through unsecured channels. CCTV or visitor logs may apply if you attend our premises, limited to security and health and safety purposes.

3. Sources of personal data

We obtain personal data directly from you when you submit forms on https://skynetai.it.com, send email to service@skynetai.it.com, telephone +44 7520 987654, write to 119 Windmill Avenue, St. Albans, AL4 9SL, United Kingdom, request quotations, place orders, register for account facilities, or otherwise communicate with us. We also obtain data automatically through cookies, pixels and similar technologies as set out in cookie-policy.html.

We may receive personal data from your employer or organisation where you are a named contact for procurement, IT, finance or facilities. We may receive data from credit reference agencies, trade references, delivery partners, payment service providers, professional advisers, Companies House and other public registers, and from third parties who refer business opportunities to us, always subject to lawful basis and, where required, transparency.

If you provide personal data about another individual, you must ensure you have a lawful basis to do so and that the individual is aware of this Policy where practicable. We rely on the accuracy of information you provide and ask that you notify us promptly of changes to your contact details.

4. Purposes and lawful bases for processing

We process personal data only where UK GDPR Article 6 provides a lawful basis. We process data necessary to take steps at your request prior to entering a contract and to perform contracts with you or your organisation, including responding to enquiries, preparing quotations, fulfilling orders for hardware, software and related services, arranging delivery, providing support, and managing accounts receivable and payable.

We process data where necessary for our legitimate interests, provided those interests are not overridden by your interests or fundamental rights and freedoms. Legitimate interests include operating and securing skynetai.it.com, improving website performance, preventing fraud and misuse, conducting B2B marketing to corporate contacts in accordance with PECR, managing supplier relationships, enforcing legal claims, and keeping business records.

Where we rely on consent, for example for non-essential cookies or certain electronic marketing to sole traders or partnerships within PECR soft-opt-in limits, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal may be communicated to service@skynetai.it.com or via unsubscribe mechanisms in marketing emails.

We process data where necessary to comply with legal obligations, including tax and accounting retention, responding to lawful requests from courts or regulators, product safety and product recall related communications, and obligations under the Data Protection Act 2018. We may also process data to protect vital interests in rare emergency circumstances.

4.1 Website operation and communications

When you browse https://skynetai.it.com we process technical and usage data to deliver pages, maintain security, diagnose faults and understand aggregate traffic patterns. When you use contact channels linked from contact.html or about.html, we process the content of your message and related metadata to respond and keep a record of the correspondence. Enquiries about services described on services.html are handled as business communications.

We may keep a customer relationship management record of corporate contacts, including notes of calls and meetings, so that we can provide continuity of service across our wholesale, retail and systems design teams. Access to such records is limited to personnel who need it for their role.

4.2 Sales, procurement and fulfilment

For B2B wholesale of professional and commercial equipment, electronics, appliances, computers, peripherals, software and office technology, we process order, delivery and invoice data to perform the contract and meet regulatory record-keeping duties. For custom computer system design and integration and enterprise software licensing, we may process project specifications, site contacts and acceptance records.

Credit accounts, if offered, involve processing of financial and identity data for credit assessment and ongoing account management. We may share limited data with credit reference agencies where appropriate and lawful. Late payment management may involve processing necessary to pursue debts under the Late Payment of Commercial Debts (Interest) Act 1998 as amended.

4.3 Marketing and PECR

We may send B2B electronic marketing about our products and services to corporate subscribers where PECR permits, or where we have consent. You may object to direct marketing at any time by emailing service@skynetai.it.com or using opt-out links. Postal marketing to business addresses may be conducted on legitimate interests with an easy opt-out. We do not sell personal data.

Telephone marketing, if undertaken, complies with PECR and Telephone Preference Service rules where applicable. We screen marketing lists against suppression requests we hold. Soft opt-in, where relied upon, is limited to similar products and services following a sale or negotiation and includes a clear opportunity to refuse.

5. Cookies and similar technologies

Our use of cookies and similar technologies is described in detail in our Cookie Policy at cookie-policy.html. Strictly necessary cookies are used on the basis of our legitimate interests and, where applicable, to provide a service requested by you. Non-essential cookies are used only with consent where required by PECR and UK GDPR.

You can manage cookie preferences through your browser settings and any consent tool we provide. Blocking some cookies may affect website functionality. Analytics cookies, if used with consent, help us understand how visitors use skynetai.it.com so we can improve content and performance.

6. Recipients and categories of disclosure

We may disclose personal data to employees and contractors under confidentiality obligations who need access to perform their duties; to logistics and courier partners for delivery; to payment and banking providers for transactions; to IT hosting, email and security providers acting as processors under written terms; to professional advisers such as accountants, auditors, solicitors and insurers; and to credit reference or fraud prevention agencies where appropriate.

We may disclose data to courts, regulators including the Information Commissioner's Office ("ICO"), law enforcement, tax authorities and other public bodies where required by law or necessary to establish, exercise or defend legal claims. In connection with a corporate transaction such as a merger, acquisition or sale of assets, personal data may be disclosed to advisers and counterparties under appropriate safeguards.

We do not disclose personal data to unrelated third parties for their own independent marketing. Processors are bound by contracts requiring them to process data only on our documented instructions, to implement appropriate security measures, and to assist us with data subject rights and breach response as required by UK GDPR Articles 28 and 32.

7. International transfers

Personal data is primarily processed within the United Kingdom. Where we transfer personal data to a third country or international organisation, we ensure an appropriate safeguard under UK GDPR Chapter V, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy regulation made by the UK government.

If a transfer relies on a derogation under UK GDPR Article 49, we will do so only where the conditions of that Article are met and will document our assessment. You may request information about transfer safeguards by contacting service@skynetai.it.com. Cloud providers may process data in multiple regions; we select providers and configurations consistent with UK law.

8. Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy, including to meet legal, accounting, tax, warranty, product safety and dispute resolution requirements. Website server logs are typically retained for a short period unless needed for security investigations. Enquiry correspondence is retained for a period aligned to our sales cycle and limitation periods.

Contract, invoice and accounting records are generally retained for at least six years after the end of the relevant financial year, or longer where required. Marketing suppression lists are retained long enough to honour opt-outs. Recruitment data, if processed, is retained according to a defined schedule communicated to applicants. When retention expires, we delete or irreversibly anonymise data where feasible.

Different retention rules may apply to different categories of data within the same file. Backup copies may persist for a limited period after deletion from live systems until overwritten in the ordinary backup cycle. Litigation holds may suspend deletion where reasonably necessary.

9. Security measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage, taking into account the state of the art, costs of implementation, and the nature, scope, context and purposes of processing as well as the risk to individuals.

Measures may include access controls, authentication, encryption in transit where appropriate, secure configuration of hosting environments, staff training, vendor due diligence, and incident response procedures. No method of transmission over the Internet or electronic storage is completely secure; we therefore cannot guarantee absolute security but we work to maintain a level of security appropriate to the risk.

You are responsible for keeping any credentials issued to you confidential and for using secure networks when transmitting sensitive information. Please notify us promptly at service@skynetai.it.com if you suspect unauthorised access to your data or our systems.

10. Your rights under UK GDPR and the Data Protection Act 2018

Subject to exemptions and conditions in UK data protection law, you have the right to be informed about our processing; to access personal data we hold about you; to rectification of inaccurate data; to erasure in certain circumstances; to restriction of processing in certain circumstances; to data portability where processing is based on consent or contract and carried out by automated means; to object to processing based on legitimate interests or for direct marketing; and to not be subject to solely automated decision-making producing legal or similarly significant effects, which we do not use in the ordinary course.

To exercise rights, contact us at service@skynetai.it.com or write to 119 Windmill Avenue, St. Albans, AL4 9SL, United Kingdom, providing enough information to verify your identity and locate the data. We will respond within one month of receipt of a valid request, extendable by two further months for complex or numerous requests as permitted by UK GDPR, in which case we will inform you of the extension and reasons.

Where we refuse a request, we will explain why and inform you of your right to complain to the ICO. You may also lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection, via https://ico.org.uk or by post to the ICO's published address. We encourage you to contact us first so we can address concerns promptly.

If processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect prior lawful processing. Objecting to direct marketing will be honoured without charge. Rights of access and other rights may be limited where disclosure would adversely affect the rights and freedoms of others, including trade secrets and intellectual property, or where exemptions under the Data Protection Act 2018 Schedules apply.

11. Automated decision-making and profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of UK GDPR Article 22. If this changes, we will update this Policy and provide required information about the logic involved, significance and envisaged consequences, and available safeguards.

Limited profiling for B2B segmentation, such as grouping corporate contacts by industry or purchase history for service relevance, may occur on legitimate interests. You may object to such processing where UK GDPR grants that right.

12. Personal data of business representatives

Where you act as a representative of a company or other organisation, we process your personal data as part of our dealings with that organisation. The organisation may also be a controller of your data in its own right. We expect organisations to ensure their staff are aware that business contact details may be shared with suppliers such as SKYNET AI LTD for procurement and support purposes.

If you leave your organisation, please ask a colleague to notify us so we can update our records. We may retain historical records of who authorised orders for audit and dispute purposes in line with our retention practices.

13. Product safety, recalls and regulatory cooperation

In connection with electronics, appliances, IT equipment and related products we supply, we may process contact data to communicate safety notices, recalls, firmware updates with safety relevance, or UKCA and product compliance information where necessary. Such processing may be based on legal obligation or legitimate interests in protecting users and complying with product legislation.

We may share necessary data with manufacturers, authorised representatives, market surveillance authorities and testing bodies where required for compliance. WEEE and related environmental compliance may also require processing of business customer data for take-back schemes where applicable.

14. Software licensing and digital products

Where we supply or distribute software licences, including enterprise software, we may process licensee contact details, installation identifiers and entitlement records necessary to activate, transfer or support licences in accordance with publisher terms and our commercial Terms and Conditions at terms-and-conditions.html. Copyright and licence compliance monitoring by publishers may involve limited data sharing under contract.

We process such data to perform the contract, comply with licence audit obligations where imposed, and protect intellectual property rights. Please ensure that licence administrator contacts remain accurate.

15. Third-party links and social features

Our website may contain links to third-party websites, including manufacturer pages, payment gateways or professional networks. Those third parties operate under their own privacy policies. We are not responsible for their content or practices. If you follow a link, you should review the third party's privacy information before providing personal data.

If we embed third-party content that sets cookies, such embedding will be addressed in our Cookie Policy and consent controls where required. Please also review our Website Terms of Service at terms-of-service.html regarding external resources.

16. Data protection impact and records

We maintain records of processing activities as required by UK GDPR Article 30 having regard to our size and the nature of our processing. Where a type of processing is likely to result in a high risk to individuals, we will carry out a data protection impact assessment and consult the ICO where legally required.

We review this Policy and our processing practices periodically and when we introduce material new processing. Changes will be posted on https://skynetai.it.com/privacy-policy.html with an updated effective date. Material changes may also be communicated to active business customers by email where appropriate.

17. Personal data breaches

In the event of a personal data breach, we will assess the risk to individuals' rights and freedoms without undue delay. Where required by UK GDPR Articles 33 and 34, we will notify the ICO within 72 hours of becoming aware of the breach, where feasible, and communicate to affected individuals if the breach is likely to result in a high risk.

Please report suspected breaches or security incidents involving our systems or data we hold to service@skynetai.it.com or +44 7520 987654 as soon as possible, including any relevant details to help us investigate.

18. California and other non-UK laws

Our primary compliance framework is United Kingdom law. If you access skynetai.it.com from outside the United Kingdom, local laws may confer additional rights. We respond to requests in accordance with UK law and, where we voluntarily extend similar courtesies, without creating a general obligation under foreign statutes unless they apply to us.

Nothing in this Policy limits any mandatory rights you may have under applicable law that cannot be excluded. Governing law for disputes about this Policy, to the extent contractual, is the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction, without prejudice to ICO complaints.

19. Contacting us and the ICO

Questions, requests and complaints about this Privacy Policy or our processing of personal data should be directed to SKYNET AI LTD, 119 Windmill Avenue, St. Albans, AL4 9SL, United Kingdom; email service@skynetai.it.com; telephone +44 7520 987654. Please mark correspondence "Data Protection".

You have the right to lodge a complaint with the Information Commissioner's Office. Further information is available from the ICO website. We welcome the opportunity to resolve concerns directly. Related website policies are available at cookie-policy.html, terms-of-service.html and terms-and-conditions.html. General company information appears on about.html and services.html. The website home page is available at /.

This Privacy Policy was last updated with an effective date of 1 September 2026. Continued use of https://skynetai.it.com after updates constitutes awareness of the revised Policy, without prejudice to rights that require consent under PECR or UK GDPR.

20. Detailed processing descriptions by activity

20.1 Account and credit management

Where we open a trade account for a business customer, we process company registration details, VAT numbers where provided, billing addresses, authorised purchaser names, credit limits, payment histories and related correspondence. The purpose is to assess and manage credit risk, fulfil orders, and maintain accurate ledgers. Lawful bases include contract performance and legitimate interests in responsible credit management, together with legal obligations for accounting records.

Credit checks may involve disclosure of limited corporate and contact data to credit reference agencies. We retain credit application packs and decision notes for periods aligned to limitation and audit needs. If an account is declined, we retain sufficient records to explain the decision and manage any dispute, then delete according to schedule.

20.2 Logistics and delivery

Delivery of computers, peripherals, commercial electronics and office technology requires processing of delivery addresses, site contacts, access instructions and proof-of-delivery signatures or names. Couriers and freight partners receive only the data needed to perform delivery. Failed delivery attempts may generate additional contact attempts by telephone or email.

For enterprise hardware wholesale and IT infrastructure procurement projects, we may process multiple site contacts and staged delivery schedules. Special delivery requirements should be communicated clearly so that we minimise unnecessary data collection.

20.3 Support, warranty and returns

Support tickets, warranty claims and returns under our commercial terms involve processing of contact details, product serial numbers, fault descriptions, and communications history. Processing is necessary for contract performance and legitimate interests in product quality and customer service. Manufacturer warranty processes may require sharing serial and contact data with the manufacturer or authorised service network.

RMA processes may retain photographs or diagnostic logs you provide. We ask that you avoid including unrelated personal data in support attachments. Consumer Rights Act 2015 rights, where applicable to consumers, are respected; our ordinary trade is B2B and commercial Terms and Conditions prevail for business customers as permitted by law.

20.4 Website analytics and security monitoring

We may process IP addresses and device data to detect malicious traffic, brute-force attempts, scraping and other abuse of skynetai.it.com. Such processing is based on legitimate interests in securing our systems and users. Security logs may be shared with cybersecurity advisers under confidentiality where needed to investigate incidents.

Analytics, if enabled with consent where required, produces aggregated statistics. We configure tools to reduce identifiability where practicable, such as IP truncation if offered by the tool. Further detail appears in cookie-policy.html.

21. Shared controllers and joint arrangements

In limited cases we may determine purposes and means of processing jointly with another organisation, for example in co-branded events or joint bids. Where joint controllership arises, we will make available the essence of the arrangement as required by UK GDPR Article 26, including a contact point for individuals.

Manufacturers and software publishers remain independent controllers of data they process under their own policies when you interact with them directly. Our disclosure of data to them for fulfilment or licence activation is typically as controller-to-controller or as necessary for contract performance, depending on the factual context.

22. Accuracy and data minimisation

We take reasonable steps to keep personal data accurate and limited to what is necessary for the purposes described. Please help us by providing accurate information and updating us when your details change. Forms on the website should request only fields relevant to the enquiry or transaction.

Staff are instructed not to collect excessive personal data in free-text fields. When notes are taken of calls, we aim to record business-relevant facts rather than unrelated private information. Periodic reviews of databases support minimisation and retention compliance.

23. Staff training and organisational accountability

Personnel who handle personal data receive guidance on confidentiality, phishing awareness, secure handling of customer information and escalation of data subject requests and suspected breaches. Access to customer systems and mailboxes is revoked when staff leave or change roles.

Vendors processing personal data on our behalf are assessed for security and privacy posture proportionate to the risk and are subject to contractual terms. We remain accountable for personal data we control even when processed by vendors.

24. How this Policy interacts with other documents

This Privacy Policy should be read with the Cookie Policy, Website Terms of Service and commercial Terms and Conditions. In the event of a conflict regarding personal data processing descriptions, this Policy prevails on privacy matters, while commercial allocation of risk, title, payment and liability is governed by the commercial Terms and Conditions for B2B supplies.

Website acceptable use and limitations of website liability are governed by terms-of-service.html. Company background and service descriptions on about.html and services.html are informational and do not override this Policy. Contact channels are listed on contact.html and in the footer of each page on https://skynetai.it.com.

25. Further information on lawful interests assessments

Where we rely on legitimate interests, we balance our interests against potential impacts on individuals. For example, B2B marketing to corporate email addresses is assessed against reasonable expectations of business contacts, PECR constraints, and the availability of opt-out. Website security monitoring is assessed as necessary and proportionate to protect our infrastructure and customers.

Individuals may request further information about our legitimate interests assessments by contacting service@skynetai.it.com. We may summarise the balancing test without disclosing confidential security details that would undermine protection measures.

Nothing in this Policy excludes or limits any liability that cannot be excluded or limited under applicable law, including statutory rights under the Data Protection Act 2018. SKYNET AI LTD thanks you for trusting us with your personal data and for reviewing this Policy carefully.

26. Product safety, recalls and regulatory communications

Where product safety law, electrical equipment regulations, UKCA marking requirements or manufacturer recall programmes require us to contact business customers, we may process contact details of procurement, facilities and IT representatives to deliver mandatory or strongly recommended safety notices. Such processing is typically based on legal obligation or legitimate interests in protecting health, safety and property.

Records of recall acknowledgements may be retained for periods aligned with product liability and insurance requirements. Recipients should cascade notices internally without delay. Questions about safety communications may be directed to service@skynetai.it.com or +44 7520 987654.

27. Policy review cycle and language

We review this Privacy Policy at least annually and whenever material changes occur in our processing, technology stack or applicable United Kingdom law. The effective date of 1 September 2026 appears at the head of each legal page on skynetai.it.com. Material changes will be highlighted on the Policy page or communicated to registered business contacts where appropriate.

This Policy is issued in English. If translated versions are provided for convenience, the English version prevails for interpretation under the laws of England and Wales, except where mandatory local language rules require otherwise for specific individuals.